--In U.S. patent no.: 5,661,803; to: Cordery et al.; issued: August 26, 1 997, a 
method for controlling keys used in the verification of encoded information generated by 
a transaction evidencing device and printed on a document is taught.-- 



In the claims: 

Plea^rewrite claim 6 as follows: 
(twice amended) A method as described in clain/t* wherein s/id passage M includes 




information tying said postage meter's public key KeyoM*P Xof said4r|formation IAV. 
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^Plea se rewrite claim 10 as follows: 

^^0. (amended) A method for certification by a certifying authority o/ 1 public key of a 
digital postage meter, said digital postage meter producing indicia/signed with a 
corresponding private key of said digital postage meter, said certifying authority having a 
published public key and a corresponding private key, said method comprising the steps 
of: 

a) said certifying authority providing said meter with an integer, said integer 
being a first function of said private key of said authority; 

S b) said meter computing a digital postage meter private key as a second function 

of said integer; and ^ 

c) said certifying authority publishing relate<^m|brmation; wherein 

d) said first function, said second function ^d^id^published related information 
are chosen so that a party seeking to verify said indicia can compute said digital postage 
meter public key by operating on said published related information with 

said published public key of said authority. 

-~ / 

In response to the Examiner's objection to claim 12 as not easily read at line 8 a clean 
version of claim 12 is set forthbelow: 

A method for certification by a certifying authority of a public key of a digital 
postage meter, said digital postage meter producing indicia signed with a corresponding 
I Q private key of said digitaVpostage meter, said certifying authority having a published 

^ public key and a corresponding private key, said method comprising the steps of: 

a) said certifying authority providing a user with an integer, said integer being a 
first function of said private key of said authority; 
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b) said user computing a digital postage meter private key as a second function of 
said integer and downloading said postage meter private key to said digital postage meter 
; and 

c) said certifying authority publishing related information; wherey 

d) said first function, said second function and said published/related information 
are chosen so that a party seeking to verify said indicia can compute/said digital postage 
meter public key by operating on said published related information with 
said published public key of said authority. 

— J , 

Please cancel claims 25 and 26 and substitute therefore claim>8l as follows: 
fo^f A method of digitally signing a postal indicium comprising the steps of: 

a) generating a message m, said message m inciting indicia data; 

b) generating a digital signature with message recovery for said message m; and 

c) incorporating said digital signature intoiaid indicium; wherein 

d) said generating step further comprises the substeps of: 

dl) generating a random integer r s , r s < nf w^ere n is the^rder of a group 
[P] defined on an elliptic curve 

d2) generating a integer ^, 
K=K(r s *P) / 

where K(p) is a mapping of points in/P] onto the integers, and P is a particular published 
point in [P]; / 
d3) generating e, / 
e = SKE K (m) 

where SKE K is a symmetric keVencryption algorithm using key K; 

d4) generating/H(M) 5 where H is a hashing function and M is a message 
which can be recovered from said indicium; 

d5) generaZig s = Key D MH(M) + r s , 
where KeyoM is the pri^ite key of a postage meter which produced said indicium; and 
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Please rewrite 



d6) setting said digital signature for said message m equal to the pair (s,e). 

7*—/ 

rite claim^ 



'27 as follows: 
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^) j^f.(amended) A nfethod as described in clairf?^ wherein M = (e,IAV), where IAV is 
identity and attributes value for said postage meter. 
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Please cancel claims 28 and 29 and substitute therefore claim 32 as follows: 




. A method of verifying a digital signature of a postal indicium/comprising the steps of: 
a) recovering a message m from a digital signature of a postal indicium; and 



b) accepting said signature as valid if said mesage/m is internally consistent; 
wherein / 

c) said recovering step further comprises the substeps of: 



cl) recovering a public key KeyoM*P for a postage meter which produced 




said indicium; 

c2) obtaining the signature (s,e) of said indicium, where s = KeyoMH(M) 
+rs and e = SKEjc(m) 9 where SKEjc is a sym'etric key encryption algorithm using key K, 
m is indicia data, and M is a message recoverable from said indicium; 

/ 

c3) obtaining M from said indicium; 

/' 

c4) generating / 

s*P [-] H(M)Key DM *P = 
H(M)Key DM *P [+] r s *P [-] H(M)Key D M*P 
r s *P 

where [-] is the inverse of [+]; / 

c5) generating ;/ 

K = K<[r s *P) 

where K(p) is a mapping of points in [P] onto the integers, and P is a particular published 
point in [P]; j ^ 

c6) generating 

m - SKE\(e) 
where SKE -1 k is the inverse of SKEk. 




1 Pleas e rewrite claim 30 as follows: 

.(amended) A method as describe/ in clainT^B wherein M = (e,IAV), where IAV is an 
identity and attributes value for saua postage meter. 



4 V5 



